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DETAILED ACTION 

1 . This action is in response of the original filing of March 25 th , 2004. Claims 1-51 
are pending and have been considered below. 

Specification 

2. The title of the invention is not descriptive. A new title is required that is clearly 
indicative of the invention to which the claims are directed. 

The following title is suggested: Training filters for detecting spasm based on IP 
addresses and URLs. 

» • 

Claim Objections 

3. Claim 1 is objected to because of the following informalities: the claim recites the 
limitation of "a component" in lines 2 and 5 of claim 1 . The examiner suggests that the o 
"a component" be identified as "a first component that receives ...." and "a second 
component that analyzes....". Appropriate correction is required. 

4. Claim 17 is objected to because of the following informalities: the claim recites 
the limitation of a component in line of the claim. The examiner suggests the used of a 
"third component". Appropriate correction is required. 

5. Claims 1-7, 9, 10, 12, 17-21, 28, 31, 33-38,40,45,48,49-51 are objected to 
because of the following informalities: the examiner notes the use of acronyms (e.g. 
URL, IP, SVM, etc.) throughout the claims without first including a description in plain 
text, as required. Appropriate correction is required. 
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6. Claim 46 is objected to under 37 CFR 1.75(c), as being of improper dependent 
form for failing to further limit the subject matter of a previous claim. Claim 46 is a 
product claim (i.e. computer-readable media) that refers back to Claim 1. The Office 
considers any claim that refers to another claim as dependent thereon, i.e. a dependent 
claim. Since Claim 1 is system and fails to add, delete, or change any limitation to claim 
1 , thus claim 9 fails to further limit its parent claim. Applicant is required to cancel the 
claim(s), or amend the claim(s) to place the claim(s) in proper dependent form, or 
rewrite the claim(s) in independent form. 

Claim Rejections - 35 USC §112 

7. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

a. The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

8. Claim 1 recites the limitation "the plurality of filters " in line 9. There is insufficient 
antecedent basis for this limitation in the claim. 

9. Claim 8 recites the limitation "the second feature-specific filters" in line 2. There 
is insufficient antecedent basis for this limitation in the claim. 

10. Claim 10 recites the limitation "the second feature-specific filters " in line 1. 
There is insufficient antecedent basis for this limitation in the claim. 

1 1 . Claim 1 3 recites the limitation "the plurality of filters " in line 1 . There is 
insufficient antecedent basis for this limitation in the claim. 

12. Claim 14 recites the limitation "the second feature-specific filters " in line 2. 
There is insufficient antecedent basis for this limitation in the claim. 
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13. Claims 18 and 19 recite the limitation "the component" in line 1. There is 
insufficient antecedent basis for this limitation in the claim. 

14. Claims 18 and 19 are rejected under 35 U.S.C. 112, second paragraph, as being, 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. It is not clear to which "component" the claim refers 
to. 

15. Claim 23 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. The claim is incomplete and it is not clear to the examiner 
what applicant is trying to claim. 

16. Claim 51 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. The claim recites the limitation of "the first smoothing 
comprises a different c value for an SVM model" it unclear to the examiner what the 
"value c" is for. 

Claim Rejections - 35 USC § 101 

17. 35 U.S.C. 101 reads as follows: 

b. " Whoever invents or discovers any new and useful process, machine, manufacture, or 
composition of matter, or any new and useful improvement thereof, may obtain a patent therefor, 
subject to the conditions and requirements of this title. 

18. Claims 1-30 are drawn to a computer program per se. A computer program is not 
a series of steps or acts and this is not a process. A computer program is not a physical 
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article or object and as such is not a machine or manufacture. A computer program is 
not a combination of substances and therefore not a compilation of matter. Thus, a 
computer program by itself does not fall within any of the four categories of invention. 
Therefore, the claims are, at best, functional descriptive material per se. Also, see 
applicant's specification, page 6, lines 17-25, which makes it clear that the components 
are not limited to hardware but can be software, hardware or a combination of both 
hardware and software. 

19. Claims 23 and 45 are rejected under 35 U.S.C. 101 because The Claimed 
invention is directed to non-statutory subject matter. The claims lack the necessary 
physical articles or object to constitute a machine or a manufacture within the meaning 
of 35 USC § 101 . They are clearly not a series of steps or acts to be a process nor are 
they a combination of chemical compounds to be a composition of matter. As such, they 
fail to fall within a statutory category. They are, at best, functional descriptive material 
per se. 

Double Patenting 

20. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) .because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington } 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 
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A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) 
may be used to overcome an actual or provisional rejection based on a 
nonstatutory double patenting ground provided the conflicting application or 
patent either is shown to be commonly owned with this application, or claims an 
invention made as a result of activities undertaken within the scope of a joint 
research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully 
comply with 37 CFR 3.73(b). 
21 . Claim 1 is rejected on the ground of nonstatutory obviousness-type double 

patenting as being unpatentable over claim 1 of U.S. Patent No. 10,856,978. Although 

the conflicting claims are not identical, they are not patentably distinct from each other 

because claim 1 of application No. 10,856, 978 contains every element of claiml of the 

present application. This is a provisional obviousness-type double patenting rejection 

because the conflicting claims have not in fact been patented. A comparison of the 



claims language in the present application and co-pending application is given below. 



10,809,163 


10,856,978 


hA system that facilitates spam detection 


1 . A spam detection system comprising: 


comprising: 




A component that receives an item and 


A component that receives an item and 


extracts a set of features associated 


extracts a set of features associated 


with an origination of a message or part 


with an origination of a message or part 


thereof and/or information that enables an 


thereof and/or information that enables an 


4 

intended recipient to contact or respond to 


intended recipient to contact, respond to, 


the message; and 


or act on the message, the features 


A component that analyzes a subset of the 


comprising at least one of IP address- 



1 
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extracted features in connection with 


based features and URL-based features; 


building and employing a plurality of 


An analysis component that analyzes at 


feature-specific filters that are. 


least a subset of the features; and 


independently trained to mitigate undue 


At least one filter that is trained on at least 


influence of at least one feature type over 


a subset of the features to facilitate 


another in the message, the subset of 


distinguishing spam messages from good 


extracted features comprising of at least 


messages 


one of a URL and an IP address, and the 




plurality of filters comprising at least a first 




feature-specific filter 





22. Claim 1 is rejected on the ground of nonstatutory obviousness-type double 
patenting as being unpatentable over claim 1 of U.S. Patent No. 1 1 ,621 ,363. Although 
the conflicting claims are not identical, they are not patentably distinct from each other 
because claim 1 of application No. 1 1 ,621 ,363 contains every element of claim 1 of the 
present application. This is a provisional obviousness-type double patenting rejection 
because the conflicting claims have not in fact been patented. A comparison of the 



claims language in the present application and co-pending application is given below. 



10,809,163 


10,621,363 


A system that facilitates spam detection 


A system that facilitates extracting data in 


comprising: 


connection with spam processing, 
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■ 




comprising: 


A component that receives an item and 


A component that receives an item and 


extracts a set of features associated 


extracts a set of features associated with 


with an origination of a message or part 


an origination of a message or part thereof 


thereof and/or information that enables an 


and/or information that enables an 


intended recipient to contact or respond to 


intended recipient to contact, respond or 


the message; and 


receive in connection with the message; 


A component that analyzes a subset of the 


and a component that employs a subset of 


extracted features in connection with 


the extracted features in connection with 


building and employing a plurality of 


building a filter, wherein the filter 


feature-specific filters that are 


determines a probability that the message 


independently trained to mitigate undue 


is spam 

* 


influence of at least one feature type over 


• 


another in the message, the subset of 




extracted features comprising of at least 




one of a URL and an IP address, and the 


• 


plurality of filters comprising at least a first 




feature-specific filter 


• 



23. Claim 1 is rejected on the ground of nonstatutory obviousness-type double 
patenting as being unpatentable overclaim 1 of U.S. Patent No. 10,454,168. Although 



Application/Control Number: 10/809,163 Page 9 

Art Unit: 2136 

the conflicting claims are not identical, they are not patentably distinct from each other 
because claim 1 of application No. 10,454,168 contains every element of claim 1 of the 
present application. This is a provisional obviousness-type double patenting rejection 
because the conflicting claims have not in fact been patented. A comparison of the 
claims language in the present application and co-pending application is given below. 



10,809,163 


10,454,168 


A system that facilitates spam detection 


A system implemented on one or more 


comprising: 


computers that facilitates extracting data in 




connection with spam processing, 




comprising: 


A component that receives an item and 


A component implemented on one or more 




nrnrpccnro. that rpppi\/p^. an ifpm and 

LM UUCOOvl O III 0 I 1 vvvlVUO CI 1 1 1 lv 1 1 1 Gil IU 


• 

with an origination of a message or part 


extracts a set of features associated with 


thereof and/or information that enables an 


an origination of a message or part thereof 


intended recipient to contact or respond to 


and/or information that enables an 


the message; and 


intended recipient to contact, respond or 


A component that analyzes a subset of the 


receive in connection with the message, 


extracted features in connection with 


wherein the set of features comprises a 


building and employing a plurality of 


host name and a domain name; 


feature-specific filters that are 


and a component that employs a subset of 


independently trained to mitigate undue 


the extracted features in connection with 
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* 


influence of at least one feature type over 


building a filter, wherein the filter is at least 


another in the message, the subset of 


one of stored on a computer readable 

■ 


extracted features comprising of at least 


storage medium, displayed on a display 


one of a URL and an IP address, and the 


device, or employed by a component 


plurality of filters comprising at least a first 


executing on one or more processors 


feature-specific filter 





(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section . 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

24. Claims 1-6, 8-14, 17-22, 31-34, 36-51 are rejected under 35 U.S.C. 102(e) as 
being anticipated by Bandinietal (US 2002/01 99095). 

Claim 1 : Bandini et al discloses a system for filtering communication comprising: 
a. A component that receives an item and extracts a set of features 
associated (attribute data) with an origination of a message (sender address, 
subject, body, embedded URLs, and IP of sending relay) or part thereof and/or 
information that enables an intended recipient to contact or respond to the 
message (The e-mail relay 46 operates to intercept e-mail messages and extract 
attribute data from messages (step 52). The extracted attribute data is used to 
generate a comparison between the intercepted e-mail and e-mail message data 
in the SPAM database 37 (step 54)) (paragraphs [0020], [0026]); and 
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b. A component that analyzes a subset of the extracted features in 
connection with building and employing a plurality of feature-specific filters that 
are independently trained to mitigate undue influence of at least one feature type 
over another in the message, the subset of extracted features comprising of at 
least one of a URL and an IP address, and the plurality of filters comprising at 
least a first feature-specific filter (Uniform Resource Locator (URL) included in an 
incoming message is compared to URLs contained records of the SPAM 
database 37 and Finally/in a related determination, the identity of the Internet 
Protocol (IP) address or Internet domain from which a SPAM message was 
received is compared to the IP address or Internet domains for the incoming 
message) (Paragraphs [0029]-[0032], Fig.2, Fig. 3). 
Claim 2: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses that a plurality of training components that individually 
employ at least one of IP addresses or URLs and other features, respectively, in 
connection with building the plurality of feature- specific filters)(Paragraphs [0029]- 
[0032], Fig.2, Fig. 3). 

Claim 3: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses that the first feature-specific filter is trained using IP 
addresses (the identity of the Internet Protocol (IP) address or Internet domain from 

» 

which a SPAM message was received is compared to the IP address or Internet 
domains for the incoming message) (Paragraph [0032]). 

Claim 4: Bandini et al discloses a system for filtering communication as in claim 1 
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above, and further discloses that the first feature-specific filter is trained using 
URLs ((Uniform Resource Locator (URL) included in an incoming message is compared 
to URLs contained records of the SPAM database 37) (Paragraph [0031]). 
Claim 5: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses that the plurality of feature specific filters comprising a 
second feature-specific filter that is trained using a subset of features extracted from the 
message other than a URL and an IP address (the subject filed of an incoming e-mail is 
compared to the subject field of records in the SPAM database 37 or In yet another 
evaluation, the body of the incoming message is compared to the body of messages in 
the SPAM database 37)(paragraphs [0029], [0030]). 

Claims 6, 20: Bandini et al discloses a system for filtering communication comprising: 

c. A component that receives an item and extracts a set of features 
associated 

* 

with an origination of a message or part thereof and/or information that enables 
an intended recipient to contact or respond to the message (The e-mail relay 46 
operates to intercept e-mail messages and extract attribute data from messages 
(step 52). The extracted attribute data is used to generate a comparison between 
the intercepted e-mail and e-mail message data in the SPAM database 37 (step 
54)) (paragraphs [0020], [0026]); 

d. At least one filter that is used when one of the IP address of the message 

■ 

or at least some part of at least one of the URLs in the message is 
unknown/known (Uniform Resource Locator (URL) included in an incoming 
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message is compared to URLs contained records of the SPAM database 37 and 
Finally, in a related determination, the identity of the Internet Protocol (IP) 
address or Internet domain from which a SPAM message was received is 
compared to the IP address or Internet domains for the incoming message) 
(Paragraphs [0029]-[0032], Fig.2, Fig. 3). 
Claim 8: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses that a filter combining component that combines 
information collected from the first and second feature-specific filters (the overall 
comparison match score, or level, is set by reference to a combination of one or more of 
the above discussed evaluations. In one embodiment, the overall SPAM likelihood is 
determined by assigning a weight to each evaluation and combining all weighed scores 
to arrive at the overall score)(paragraphs [0033], [0034], and Fig. 4). 
Claims 9, 21: Bandini et al discloses a system for filtering communication as in claims 
8 and 20 above, and further discloses that the first feature-specific filter detects at least 
one of known IP addresses and at least one known URL in the message (paragraphs 
[0031], [0032]). 

Claims 10, 22: Bandini et al discloses a system for filtering communication as in claims 
8 and 20 above, and further discloses that the second feature-specific filter detects non- 
IP address and non-URL data in the message (paragraphs [0028]-[0030]). 
Claim 11: Bandini et al discloses a system for filtering communication as in claim 8 
above, and further discloses that the filter combining component combines the . 
information by at least one of multiplying scores generated by the filters, adding scores 
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generated by the filters, or training an additional filter to combine the scores (add 
evaluation result to running comparison score according to relative weight) (paragraph 
[0023], Fig. 3 step 68). 

Claim 13: Bandini et al discloses a system for filtering communication as in claim 6 
above, and further discloses that the filter selection component that selects and 
employs at least one feature-specific filter out of the plurality of filters for which there is 
sufficient data extracted from the message (Fig. 3). 

Claim 14: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses that the first feature-specific filter is trained independently 
of the second feature-specific filter to mitigate either filter influencing the other when 
filtering the message (fig. 3 step 64 and step 80). 

Claim 17: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses that the component that determines whether at least one 
IP address in the message is any one of external or internal to the recipients system via 
a machine learning technique (Fig. 1, item 46). 

Claim 18: Bandini et al disclose a machine learning method as in claim 17 above, and 

further discloses that: 

a. The component employs MX records to determine a true source of a 
message by way of tracing back through a received from list until an IP address 
is found that corresponds to a fully qualified domain which corresponds to an 
entry in the domain's MX record (in a related determination, the identity of the 
Internet Protocol (IP) address or internet domain from which a SPAM message 
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was received is compared to the IP address or internet domains for the incoming 
message. The IP address or Internet domain of the sending relay is generally not 
enough on its own to indicate that a message is likely SPAM. However, a match 
of IP address or internet domain would enhance a finding of likely SPAM by 
reference to other evaluations)(paragraph [0032); and 

* 

b. Determines whether the IP address is external or internal by performing at 
least one of the following: 

concluding that the IP address is in a form characteristic to internal IP addresses 
(paragraph [0032]); and 

c. Performing at least one of an IP address lookup and a reverse IP address 
lookup to ascertain whether the IP address correlates with a sender's domain 
name (paragraph [0036]). 

Claim 19: Bandini et al disclose a machine learning method as in claim 17 above, and 
further discloses that the component determines whether the IP address is external or 
internal comprises at least one of the following: 

» 

a. Collecting user feedback related to user classification of messages as 
spam or good (paragraph [0036], Fig. 3); 

b. Examining messages classified as good by a user to learn which servers 
are internal (Fig. 3, step 72, 78); and 

c. Finding a worst scoring IP address in a message (Fig. 3 step 70). 
Claim 31: Bandini et al discloses a system for filtering communication comprising: 
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e. Providing a plurality of training data (The evaluation steps are made by 
reference to various attributes of an incoming message, including sender 

< 

address, recipient list, subject, body, embedded URLs, and IP of sending relay. 
As may be appreciated, an evaluation on the basis of other attributes of the 
incoming message can alternatively be made as part of the e-mail filtering of the 
invention without departing from the teachings of the invention) (paragraph 
[0026]); 

f. Extracting a plurality of feature types from the training data (Fig. 3 steps 
64 and 80), the feature types comprising at least one IP address, at least one 
URL and text-based features (paragraphs [0031], [0032]); and 

g. Training a plurality of feature-specific filters for the respective feature in an 
independent manner so that a first feature does not unduly influence a message 
score over a second feature type when determining whether a message is spam 
(paragraphs [0028]-[0032], Fig. 3). 

* 

Claim 32: Bandini et al discloses a system for filtering communication as in claim 31 
above, and further discloses that the plurality of training data comprises messages 
(paragraphs [0021], [0026], [0030]). 

Claim 33: Bandini et al discloses a system for filtering communication as in claim 31 
above, and further discloses that the plurality of feature-specific filters comprises at 
least two of the following: 

h. A known IP address filter (paragraph [0032]); 

i. An unknown IP address filter (paragraph [0032]); 
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j. A known URL filter (paragraph [0031]); an 
k. Unknown URL filter (paragraph [0031]); and 
I. A text-based filter (paragraph [0029], [0030]). 

Claims 12, 36: Bandini et al discloses a system for filtering communication as in claims 
6 and 33 above, and further discloses that the unknown IP address filter is trained using 
other messages comprising unknown IP addresses (paragraph [0032], Fig. 3). 
Claim 34: Bandini et al discloses a system for filtering communication as in claim 33 
above, and further discloses that the the known IP address filter is trained using 32 bits 
of IP addresses (paragraph [0032], Fig. 3). 

Claim 37: Bandini et al discloses a system for filtering communication as in claim 33 
above, and further discloses that the text-based filter is trained using words, phrases, 

* * 

character runs, character strings, and any other relevant non-IP address or non-URL 
data in the message (paragraphs [0029], [0029]). 

Claim 38: Bandini et al discloses a system for filtering communication as in claim 33 
above, and further discloses a step of employing at least one of the known IP address 
filter, the unknown IP address filter, the known URL filter, and the unknown URL filter 
together with the text-based filter to more accurately determine whether a new message 
is spam (paragraphs [0029]-[0032], Fig. 3, Fig.4). 

Claim 39: Bandini et al discloses a system for filtering communication as in claim 33 
above, and further discloses a step of employing at least one of the feature-specific 
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filters in connection with determining whether a new message is spam, such that the 
feature-specific filter is selected based in part on most relevant feature data observed in 
the new message (paragraphs [0029]-[0032], Fig. 3, Fig.4). 

Claim 40: Bandini et al discloses a system for filtering communication as in claim 33 
above, and further discloses that the URL filter is trained on URL data comprising a fully 
qualified domain name and subdomains of the fully qualified domain name (paragraph 
[0031], Fig. 3). 

Claim 41 : Bandini et al discloses a system for filtering communication as in claim 31 
above, and further discloses a step of combining message scores generated from at 
least two filters used to scan a new message to generate a total score that facilitates 
determining whether the message is spam (paragraph [0023], Fig. 3 step 68). 
Claim 42: Bandini et al discloses a system for filtering communication as in claim 41 
above, and further discloses a step of combining message scores comprises at least 
one of the following: multiplying the scores; adding the scores; and training a new model 
to combine the scores (paragraph [0023], Fig. 3 step 68). 

Claim 43: Bandini et al discloses a system for filtering communication as in claim 33 
above, and further discloses that the combined with a feedback loop mechanism 
whereby users provide their feedback regarding incoming messages by submitting 
message classifications to fine tune the one or more feature-specific filters (paragraphs 

■ 

[0034]-[0036]). 

Claim 44: Bandini et al discloses a system for filtering communication as in claim 31 
above, and further discloses a step of quarantining messages that satisfy at least one 
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criterion for a period of time until additional information about the message can be 
collected to update one or more feature-specific filters to facilitate determining whether 
the messages are spam (The attributes are employed to determine whether an e-mail 
message should be allowed to flow to the e-mail server 40 or should be diverted and 
subject to other action. Some of those actions, which the e-mail relay 46 is adapted to 
execute, include: quarantine the e-mail in the local message store database 38, reject 
the e-mail, and generate a special message to the intended recipient indicating that the 
e-mail message has been diverted)(paragraphs [0019], [0021], Fig. 2). 
Claim 45: Bandini et al discloses a data packet adapted to be transmitted between two 
or more computer processes facilitating improved detection of spam (fig. 2), the data 
packet comprising: information associated with training a plurality of feature-specific 
filters in an independent manner to mitigate undue influence between features and 
employing at least one feature specific filter comprising an IP address filter or a URL 
filter to determine whether a message is spam (paragraphs [0028], [0040]). 
Claim 46: Bandini et al discloses a system for filtering communication as in claim 1 
above, and further discloses a computer readable medium having stored thereon the 
system of claim 1 (paragraph [001 3]). 

Claim 47: Bandini et al discloses a system for filtering communication comprising a 
plurality of filters comprising at least one filter that is trained by using different 
smoothing for different spam features (paragraphs [0029]-[0032], Fig. 3 steps 64 and 
80). 

Claim 48: Bandini etal discloses a system for filtering communication as in claim 47 
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above, and further discloses that the feature is one of the following: an IP address or a 
portion thereof or a URL or a portion thereof (paragraphs [0029], [0030]). 
Claim 49: Bandini et al discloses a system for filtering communication as in claim 48 
above, and further discloses that at least one filter is trained by using different 
smoothing for different portions of at least one of an IP address or a URL (paragraphs 
[0031], [0032]). 

Claim 50: Bandini et al discloses a system for filtering communication comprising: 
m. Extracting data from a plurality of messages (paragraph [0026]); 
n. Training at least one machine learning filter using at least a subset of the 
data, the training comprising employing a first smoothing for at least one of IP 
address or URL features and at least a second smoothing for other non-IP 
address or non-URL features (paragraphs [0031], [0032]). 
Claim 51: Bandini et al discloses a system for filtering communication as in claim 50 
above, and further discloses that the smoothing (evaluation) differs in at least one of the 

* 

following aspects: 

a. The first smoothing comprises a different variance compared to the 
second smoothing with respect to a maximum entropy model (Fig. 3, step 64 and 
80); and 

« 

b. The first smoothing comprises a different c value for an SVM model 
(paragraphs [0028]-[0032]). 
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Claim Rejections - 35 USC § 103 

25. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

26. Claims 15, 16, 23-30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Bandinietal (US 2002/0199095) in view of Rothwell et al (US 20030088627). 

Claim 15: Bandini et al discloses a system for filtering communication as in claim 14 
above, but does not explicitly discloses that at least one of the feature-specific filters 

■ 

models dependencies. However, Rothwell et a I discloses an intelligent spam detection 
system, which further discloses that at least one of the feature-specific filters models 
dependencies (paragraph [0025]). Therefore, it would have been obvious to one of 
ordinary skills in the art at the time the invention was made to Bandini et al to use a 
model dependencies. One would have been motivated to do so in order to control 
delivery of unsolicited electronic mail and to provide a system that can dynamically 
detect unwanted SPAM electronic mail messages Rothwell etall (paragraph [0008]). 
Claim 16: Bandini et al discloses a system for filtering communication as in claim 1 
above, but does not explicitly discloses that the plurality of feature-specific filters is 
machine learning filters. However, Rothwell et al discloses an intelligent spam 
detection system, which further discloses that the plurality of feature-specific filters is 
machine-learning filters (a neutral analysis engine is used to determine whether a 
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message is SPAM or not) (paragraph [0031], Fig. 1 , and Fig. 3). Therefore, it would 
have been obvious to one of ordinary skills in the art at the time the invention was made 
to Bandini et al to use a machine learning system. One would have been motivated to 
do so in order to control delivery of unsolicited electronic mail and to provide a system 

■ 

that can dynamically detect unwanted SPAM electronic mail messages Rothwell et all 
(paragraph [0008]). 

Claim 23: Bandini et al discloses a method that optimizes an objective function of the 

form OBJECTIVE (MAXSCORE (ml), MAXSCORE (m2) MAXSCORE(mk), wL.wn) 

where MAXSCORE(mk) = MAX(SCORE(IPk,1), SCORE(IPk,2), SCORE(IPk.kl)) 
where mk = messages; 

IPk.i represents the presence of some property(s) of ink; and SCORE(IPk.i) = the sum 
of the weights of the features of IPk,i.(paragraphs ([0021][0023],[0039], Figure .3 ). But 
does not explicitly discloses that the method is a machine learning method. However, 
Rothwell et al discloses an intelligent spam detection system, which further discloses a 
machine learning method (a neutral analysis engine is used to determine whether a 
message is SPAM or not) (paragraph [0031], Fig. 1, and Fig. 3). Therefore, it would 
have been obvious to one of ordinary skills in the art at the time the invention was made 
to Bandini et al to use a machine learning system. One would have been motivated to 
do so in order to control delivery of unsolicited electronic mail and to provide a system 
that can dynamically detect unwanted SPAM electronic mail messages Rothwell et all 
(paragraph [0008]). 



Application/Control Number: 10/809,163 Page 23 

Art Unit: 2136 

Claim 24: Bandini etal and Rothwell et all disclose a machine learning method as in 
claim 23 above, and Bandini et al further discloses that the objective function depends 
in part on whether the messages are properly categorized as any one of spam or good 
(Fig3. step steps 78,76, 78, and 82). 

Claim 25: Bandini et al and Rothwell et all disclose a machine learning method as in 
claim 23 above, and Bandini et al further discloses that. The machine learning method 
comprises a step of learning the weights for each feature in turn (In one embodiment, 
SPAM database records include a field for a submission count, corresponding to each 
SPAM message. The submission count is preferably used as part of the comparison 

* 

formula to add weight to certain evaluations. For example, when a subject match is for a 
SPAM record with a high submission count, the subject match result should have an 
increased weight since the message is very likely to be a repeat of the SPAM message) 
(paragraphs [0023], [0033], [0039], Fig. 3 step 68). 

Claim 26: Bandini et al and Rothwell et all disclose a machine learning method as in 
claim 25 above, and Bandini etal further discloses that the step of learning the weight 
for a given feature comprises sorting training instances comprising a property, the 
property comprising a feature in order by the weight at which the score for that message 
varies with the weight for that feature (paragraphs [0023], [0033], [0039], Fig. 3 step 68) 
Claim 27: Bandini et al and Rothwell et all disclose a machine learning method as in 
claim 26 above, and Bandini et al further discloses that the training instances comprise 
electronic messages (paragraphs [0021], [0026], [0030]). 

Claim 28: Bandini et al and Rothwell et all disclose a machine learning method as in 
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claim 23 above, and Bandini etal further discloses that the messages are training 
instances and the property and the properties comprise one or more IP addresses that 
the message originated from and any URLs in the message (paragraphs [0031], 
[0032]). 

Claim 29: Bandini et al and Rothwell et all disclose a machine learning method as in 
claim 23 above, and Bandini et al further discloses that the step of learning is 
performed using an approximation MAX(a1, a2, an) is approximately equal to 
SUM(a1x, a2x, .... anX)(l/x)( paragraphs ([0021][0023],[0039], Figure .3). 
Claim 30: Bandini et al and Rothwell et all disclose a machine learning method as in 
claim 29 above, and Bandini et al further discloses that the objective function depends 
in part on whether the messages are properly categorized as spam or good (fig. 3 steps 

72, 76, 78, 82). 

> 

27. Claims 7 and 35 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bandini etal (US 2002/0199095) in view of Jungck (US 7,003,555). 

Claims 7, 35: Bandini etal discloses a system for filtering communication as in claims 
6 and 33 above, but does not explicitly discloses that the at least one filter is trained 
using some number of bits less than 32 bits of an IP address. However, Jungck 
discloses a a system for enhancing the infrastructure of a network, which further 
discloses that at least one filter is trained using some number of bits less than 32 bits of 
an IP address (This 32 -bit IP address has two parts: one part identifies the source or 
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destination sub-network (with the network number) and the other part identifies the 
specific machine or host within the source or destination sub-network (with the host 
number). An organization can use some of the bits in the machine or host part of the 

* 

address to identify a specific sub-network within the sub-network. Effectively, the IP 
address then contains three parts: the sub-network number, an additional sub-network 
number, and the machine number)(column 8, lines 53-65). Therefore, it would have 
been obvious to one of ordinary skills in the art at the time the invention was made to 
Bandini et al to use part of the IP address in the filtering process. One would have 
been motivated to do so jn order to identify the source of the received message. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Fatoumata Traore whose telephone number is (571) 
270-1685. The examiner can normally be reached Monday through Thursday from 7:00 
a.m. to 4:00 p.m. and every other Friday from 7:30 a.m. to 3:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nassar G. Moazzami, can be reached on (571) 272 4195. The fax phone 
number for Formal or Official faxes to Technology Center 2100 is (571) 273-8300. Draft 
or Informal faxes, which will not be entered in the application, may be submitted directly 
to the examiner at (571) 270-2685. 
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Any inquiry of a general nature or relating to the status of this application or 

* 

proceeding should be directed to the Group Receptionist whose telephone number is 
(571)272-2100. 



FT Nassar G. Moazzami 

Thursday September 20 th , 2007 Supervisory Patent Examiner 




